PT-2018-17759 · Feingeist · Mailbutler Shimo

Benjamin Watson + 1 · Published 2018-02-07 · Updated 2020-05-11 · CVE-2018-6823

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mailbutler Shimo versions prior to 4.1.5.1

Description The issue concerns an unprotected XPC service in the com.feingeist.shimo.helper tool LaunchDaemon, which can be exploited to execute scripts as root.

Recommendations For Mailbutler Shimo versions prior to 4.1.5.1, update to version 4.1.5.1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2018-6823

Affected Products

Mailbutler Shimo

References · 3

• https://osv.dev/vulnerability/CVE-2018-6823 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6823 · Security Note
• https://github.com/VerSprite/research/blob/master/advisories/VS-2018-001.md · Note